epublikasies.netwerk24.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0c:3f:3e:43:fc:3a:21:d9:21:14:0d:8b:c0:e3:c8:c6 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=epublikasies.netwerk24.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:3f:3e:43:fc:3a:21:d9:21:14:0d:8b:c0:e3:c8:c6
Serial Number (int): 16279113547249499490657558989845547206
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 11:f2:92:cf:9e:ae:90:d7:59:ca:2a:8c:0e:2c:9a:91:a0:52:47:12
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 8e:8c:0a:9d:b3:26:1b:da:57:95:f7:91:db:21:de:a4:4b:04:1f:44
Fingerprint (sha256): 4f:bc:be:c5:0c:4c:91:38:c9:ea:c7:8e:7e:94:1a:e5:52:97:a7:f5:27:34:95:66:64:38:d3:49:52:08:5c:86

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate epublikasies.netwerk24.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epublikasies.netwerk24.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

epublikasies.netwerk24.com
e-publikasies.streeksnuus.netwerk24.com
e-editions.snl24.com
e-editions.localnews.netwerk24.com
e-editions.news24.com
epublikasies.landbou.com

Other certificates including the domain name netwerk24.com

(limited to 100 certificates)
netwerk24.com
*.netwerk24.com
netwerk24.com
netwerk24.com
projekbuitewerking.netwerk24.com
subscriber.pagesuite-professional.co.uk
projekbuitewerking.netwerk24.com
mylpaal.netwerk24.com
sni.cloudflaressl.com
codykit.dev
www.pagesuite.co.uk
ssl820166.cloudflaressl.com
www.pagesuite.co.uk
subscriber.pagesuite-professional.co.uk
apk.dhaniproduction.com
netwerk24.com
*.netwerk24.com
*.netwerk24.com
www.pagesuite.co.uk
bhilwarapest.com
cyril100.netwerk24.com
*.netwerk24.com
*.localnews.netwerk24.com
projekbuitewerking.netwerk24.com
pagesuite.netwerk24.com
takibi-fire.com
subscriber.pagesuite.com
www.cannytech.com
fixit.tuis.co.za
netwerk24.com
subscriber.pagesuite-professional.co.uk
subscriber.pagesuite-professional.co.uk
projekbuitewerking.netwerk24.com
*.netwerk24.com
cube.januskopf.com
www.pagesuite.co.uk
*.streeksnuus.netwerk24.com
ssl820166.cloudflaressl.com
ssl820165.cloudflaressl.com
ssl820167.cloudflaressl.com
epublikasies.netwerk24.com
chrisbarnard.netwerk24.com
acc.dots-and-boxes.hjvv.nl
netwerk24.com
subscriber.pagesuite.com
mylpaal.netwerk24.com
www.blackbird.rocks
subscriber.pagesuite.com
subscriber.pagesuite.com
*.netnuus.com
*.netnuus.com
www.pagesuite.co.uk
netwerk24.com
www.mcareauto.com
www.darshilpatel.com
www.pagesuite.co.uk
*.netwerk24.com
fixit.tuis.co.za
netwerk24.com
*.netwerk24.com
*.netnuus.com
mylpaal.netwerk24.com
mylpaal.netwerk24.com
www.pagesuite.co.uk
netwerk24.com
sni.cloudflaressl.com
pagesuite.netwerk24.com
*.netwerk24.com
archive.currents.fm
*.netwerk24.com
*.netwerk24.com
mylpaal.netwerk24.com
mylpaal.netwerk24.com
subscriber.pagesuite-professional.co.uk
www.pagesuite.co.uk
netwerk24.com
pagesuite.netwerk24.com
cyril100.netwerk24.com
ssl820167.cloudflaressl.com
subscriber.pagesuite-professional.co.uk
chrisbarnard.netwerk24.com
maanlanding50.netwerk24.com
subscriber.pagesuite.com
netwerk24.com
jcpea.tech
chrisbarnard.netwerk24.com
netwerk24.com
netwerk24.com
*.netwerk24.com
chrisbarnard.netwerk24.com
*.localnews.netwerk24.com
ssl820166.cloudflaressl.com
*.netwerk24.com
*.netwerk24.com
www.vigor-witaminy.com
subscriber.pagesuite.com
ssl512452.cloudflaressl.com
covid-19data.netwerk24.com
cdn.aa.onstuimig.nl
cyril100.netwerk24.com

Certificate

The complete raw certificate details for epublikasies.netwerk24.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdzCCBV+gAwIBAgIQDD8+Q/w6IdkhFA2LwOPIxjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDkyMDAwMDAwMFoXDTI0MTAxOTIzNTk1OVowJTEj
MCEGA1UEAxMaZXB1Ymxpa2FzaWVzLm5ldHdlcmsyNC5jb20wggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDDecfEFFjdFT4GZd36U6l4RbWV8ND9aQ6pOe1k
Bnv8+DeoZcHS79dUAAYgPxqL+4qTjG8pfvWB61PJABCgbN17Gdyd7ZLUMTKed3FX
foO5g84oCt5gmeKR/9xrSd1LWwMMe3xECBLfBb5aBVmSOjEbqw73twUOY04fb+O6
FU+g/xatMNQ+Mllfu9hUNkH3hnl3QekAijOxmwBAVIw8SyJh+/fpJ/HfnPcgxFxt
1UwRqru+2uvF91hUCVpVNOhtLRTRbEq0SKEI2Fl9jszFi1ZHEL04xKtouWHo4TFV
yQeun+u8KBg9ClOqJOEU3y5J7QPJX/X7w1yreiNKZBYtdBZPAgMBAAGjggOKMIID
hjAfBgNVHSMEGDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUEfKS
z56ukNdZyiqMDiyakaBSRxIwgbsGA1UdEQSBszCBsIIaZXB1Ymxpa2FzaWVzLm5l
dHdlcmsyNC5jb22CJ2UtcHVibGlrYXNpZXMuc3RyZWVrc251dXMubmV0d2VyazI0
LmNvbYIUZS1lZGl0aW9ucy5zbmwyNC5jb22CImUtZWRpdGlvbnMubG9jYWxuZXdz
Lm5ldHdlcmsyNC5jb22CFWUtZWRpdGlvbnMubmV3czI0LmNvbYIYZXB1Ymxpa2Fz
aWVzLmxhbmRib3UuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAw
oC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3Js
MHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEu
YW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFt
YXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB
1nkCBAIEggFuBIIBagFoAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xa
OnQAAAGKsQzY4QAABAMARzBFAiEA6fAyrKZJ/pmZ59+8KHduElwtULGCF5QRDV7N
8eiFpTACICKZkHYR84WbQ2DECH844VZ/QWaUkqnnEorA+jAfobWEAHYASLDja9qm
RzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGKsQzY7wAABAMARzBFAiAaMdFh
r47sXK5fqP+LJFJLnJuqDz6/+P5AdqsM1WAagAIhAM/9Xq4r66CkzNKJh2sy/ABy
1ga7yAI7NEHuiDokUzgBAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX
+6sAAAGKsQzYqgAABAMARzBFAiAbA1dUPuetKqsv3vVsUr8Sek1YtxjbYHzlhvBU
BkW1GwIhAOwwK3eWdT9WRbqTnd0PSW2brRKmMhQzIpBdwtZACDsQMA0GCSqGSIb3
DQEBCwUAA4IBAQARV6wE2LvZh6+Gn+f0sK9gGErb+DxWXYXV/UvRSArTqWXDOfHq
y4QWBi/S+BxccMvIZOrXvUeElo6ruVVFLTemDGG84KMwPXsM4LVWck7Su4Oi5wwn
OgIg8enmfsQk+EqLXVeOh23vaqyRquM6SnDjwkpjoxCGN+MyIR8ferbMv0fWNETd
Idg7dZAxmcg/Wu7fkcjvbm8rbOjQlVk6co/bPgIHoRuBVu2WhA7x6Hc7IP/i/gGK
VvO5z4Or9pt+524jqeVP3MmBL03uFKVim6fy9Ic0oatUcBptZudHz7GsN/ytj05K
zT3+CnoyZSj0bbfjvCAleYKe1MhOXsKbPoGa
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3nHxBRY3RU+BmXd+lOp
eEW1lfDQ/WkOqTntZAZ7/Pg3qGXB0u/XVAAGID8ai/uKk4xvKX71getTyQAQoGzd
exncne2S1DEynndxV36DuYPOKAreYJnikf/ca0ndS1sDDHt8RAgS3wW+WgVZkjox
G6sO97cFDmNOH2/juhVPoP8WrTDUPjJZX7vYVDZB94Z5d0HpAIozsZsAQFSMPEsi
Yfv36Sfx35z3IMRcbdVMEaq7vtrrxfdYVAlaVTTobS0U0WxKtEihCNhZfY7MxYtW
RxC9OMSraLlh6OExVckHrp/rvCgYPQpTqiThFN8uSe0DyV/1+8Ncq3ojSmQWLXQW
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16279113547249499490657558989845547206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epublikasies.netwerk24.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24676521590081148061293087985717002241527185877569308548993906306180902228711103280510825737796585780121094666462514502198794308093096640170885862423191530462489117965946079199828879274372533801639102472183598628785717039926928405254938441037924044372572495221442960943279541205291317350023157973769095046149142838195664561558104342511703236494461824695255002209985188055401520149057288556067086579643168779975731500666849376050963457865930044573118693275618885179324531078561006348466309273506908486747513016123477274470453748814463030871502788231811586838718864210133865207891054992213831228412515230547085945476687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11f292cf9eae90d759ca2a8c0e2c9a91a0524712
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epublikasies.netwerk24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-publikasies.streeksnuus.netwerk24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-editions.snl24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-editions.localnews.netwerk24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-editions.news24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epublikasies.landbou.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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